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Description 

BACKGROUND OF THE INVENTION 

[0001] The present invention relates to a system, s 
which manages copyright in utilization of digital data, i. 
e. copyrights in display, storage, copying, editing and 
transfer of digital data. 

BACKGROUND TECHNIQUE 

[0002] In the information- oriented society of today, 
satellite broadcasting using broadcasting satellite (BS) 
or communication satellite (CS) or cable television 
(CATV) broadcasting using coaxial cable or optical fiber 
cable are being propagated in addition to ordinary ter- 
restrial broadcasting. 

[0003] In the satellite broadcasting or CATV broad- 
casting, which can distribute information to several tens 
of channels at the same time, scrambled channels for 
broadcasting motion pictures, sports or music pro- 
grams, which cannot be viewed by comprehensive con- 
tract, are provided in addition to general non-scrambled 
channels, which can be viewed under comprehensive 
contract. To view the scrambled channel, it is necessary 
to subscribe for descrambling. Because the period of 
such subscription is usually as about one month, it is not 
possible to view the programs on such channels at any 
desired time. 

[0004] To solve the above problems, M. SAITO has 
proposed a system in JP-A 6-46419 and JP-A 
6-141004, by which a user can receive a viewing permit 
key from a charging center through communication line 
and can view programs by descrambling each program, 
scrambled by different scrambling pattern, using the 
viewing permit key, and is charged for programs at the 
same time, and has also proposed an apparatus for 
such a system in JP-A 6-132916. 
[0005] En the above system and apparatus, a user re- 
quests for viewing the scrambled program to a charging 
center via communication line using a communication 
device. Upon receipt of the request for viewing, the 
charging center sends a permit key to the communica- 
tion device. At the same time, the fee for viewing is 
charged and is collected from the user. 
[0006] Upon receipt of the permit key via the commu- 
nication device, the user provides the permit key to a 
receiving device by direct means connecting the com- 
munication device with the receiving device or by indi- 
rect means such as flexible disk. The receiving device 
uses the permit key thus received and descrambles the 
program. 

[0007] As an application of the above system and ap- 
paratus, JP-A 6-1 3291 6 also describes a system and an 
apparatus, by which a tape or a disk having a plurality 
of data, scrambled by a different scrambling pattern re- 
spectively, recorded on it can be sold or lent, and the 
specific data can be utilized using a permit key supplied 



via IC card or the like. 

[0008] In the information-oriented world of today, 
computer communication networks are now organized 
to utilize the data. Such communication networks in- 
clude a local network called LAN (Local Area Network), 
a national network called WAN (Wide Area Network) or 
an international network called Internet. These networks 
utilize various types of data, which have been stored in- 
dependently by each computer in the past. 
[0009] On the other hand, a new technique to digitize 
information has been developed, by which television 
moving picture signals can be compressed to reduce the 
amount of information, which was not possible to digitize 
in the past because amount of information is enormous- 
ly increased when digitized. For the digitization of infor- 
mation, a number of standards have been formulated, 
including H.261 standard for video conference, JPEG 
(Joint Photographic Image Coding Experts Group) 
standard for still picture, MPEG 1 (Moving Picture image 
Coding Experts Group 1) standard for image accumu- 
lation, and MPEG 2 standard used for wide application 
from current television broadcasting to high definition 
television broadcasting. 

[0010] The digitization technique utilizing the image 
compression technique is not only used for television 
broadcasting or video image recording but also used for 
handling television moving picture data which could not 
be handled by computer. Attention is now focused on 
"multimedia system" as future technique, which can 
handle various types of data by computer and digitized 
television moving picture data at the same time. 
[001 1 ] The multimedia system is also incorporated in 
data communication and is utilized as one of the data 
on database. 

[0012] With the utilization range of the database being 
expanded than ever, important problems arise such as 
the problem of how to charge the fee for data utilization 
from the database, the problem of copyrights related to 
copying or transfer of data other than those directly uti- 
lized, or the problem of secondary exploitation right as- 
sociated with secondarily generated copyrights in data 
editing. 

[0013] To ensure perfect editing of charging and cop- 
yrights, it is necessary to take such measure that data 
cannot be utilized by those other than the authorized us- 
ers, and the best means for this purpose is to encrypt 
the data. 

[001 4] In the television systems or database systems 
as described above, a crypt key is needed to encrypt 
the data and to decrypt and utilize the encrypted data, 
and a crypt key must be delivered to the user, while the 
procedure is very complicated because perfect security 
and reliability must be assured. 
[0015] In the present invention, crypto logy is very im- 
portant. First, description will be given on the cryptog- 
raphy in general. 

[0016] In the cryptography, the encryption to encrypt 
a plaintext M using a crypt key K and to obtain a cryp- 
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togram C is expressed as: 

C = E (K, M) 

and decryption to obtain a plaintext M from the crypto- 
gram C using a crypt key K is expressed as: 

M = D (K, C). 

[0017] Further, M.SAITO has proposed a concrete ar- 
rangement of a data copyright management system in 
JP-A 6-64889. 

[0018] In this system, in order to manage copyrights 
in display (including the process to turn to audio signal), 
store, copy, edit and transfer of digital data in a database 
system including real-time transmission of digital pic- 
ture, either one or more of the program to manage the 
copyrights, copyright information or the copyright man- 
agement message are transmitted, when necessary, in 
addition to a permit key to allow the user to utilize the 
encrypted data. 

[001 9] When the user attempts to utilize the data other 
than the condition of the permission or of request, a cop- 
yright management message is displayed on the 
screen, notifying caution or warning to the user. The 
copyright management program watches and manages 
in such manner that no utilization of data is performed, 
which is against the condition of request or permission. 
[0020] The data is encrypted and supplied and is then 
decrypted using a permit key and is utilized. When the 
data is stored in a device, is copied to a medium other 
than the device, or is transferred outside the device, re- 
encryption is performed. Also, a permit key is provided 
for each utilization such as displaying/using, storing, 
copying, editing, transferring, etc. 
[0021] US 5,291 ,598 discloses a system to control the 
use of an informational product, which is processed con- 
secutively in three different manufacture modules. The 
first manufacture module generates a registration code, 
the second manufacture module changes the operation- 
al mode of the informational product upon verification of 
an authorization code and stores a user record in the 
informational product. 

[0022] Each time when the informational product is 
activated, the third manufacture module determines the 
proper operational mode based on the mode stored in 
the user record and the identity of the executing proc- 
essor, 

[0023] Ham et al., Computers & Security, Vol. 11 
(1992) No. 8 p. 747-752 discloses a software authenti- 
cation technique in order to provide protection against 
data corruption during electronic transmission via net- 
works or manual distribution via disks. No copyright pro- 
tection is intended. 

[0024] EP 709 760 A2 is only relevant with respect to 
novelty of the present invention as it has an older priority 



date than the present invention but was published after 
the priority data of the present invention. It discloses a 
data copyright management system wherein a primary 
crypt key is used by a user to decrypt supplied data. A 
second use permit key is used for editing the primary 
copyrighted data. After editing the edited primary copy- 
righted data are encrypted again by the second use per- 
mit key before storing the edited data. 

SUMMARY OF THE INVENTION 

[0025] It is an object of the present invention to pro- 
vide a copyright management method wherein copy- 
righted primary data are not altered while they may be 
further edited and distributed as copyrighted secondary 
data. 

[0026] This object is solved by the method according 
to claim 1 and the data carrier according to claim 14. 
Improvements of the inventive method and data carrier 
are provided in the respective dependent claims. 
[0027] The system according to the present invention 
comprises a database, a key control center, a primary 
user, a secondary user, and a network system, which 
connects these with each other. A primary copyright la- 
bel, a primary use permit key including a first crypt key, 
a secondary use permit key including a second crypt 
key, a secondary copyright label, a third crypt key, and 
a copyright management program are used. 
[0028] When a plaintext copyrighted primary data is 
supplied to a primary user, the data is encrypted using 
a first crypt key. When the primary user wishes to utilize 
the encrypted copyrighted primary data, the user re- 
quests distribution of a permit key for primary utilization 
via a network system to a key control center. When the 
request for distribution of the permit key for primary uti- 
lization is received from the primary user, the key control 
center sends the permit key for primary utilization to the 
primary user and charges the fee. 
[0029] Using a first crypt key including in the received 
primary use permit key, the primary user decrypts the 
encrypted copyrighted primary data In case the plaintext 
copyrighted primary data is stored in a device of the pri- 
mary user, the data is re-encrypted using the primary 
use permit key. 

[0030] When the primary user wishes to utilize the 
copyrighted primary data, the primary user requests the 
distribution of a secondary use permit key for editing the 
plaintext copyrighted primary data to the key control 
center via the network system. The key control center 
sends the secondary use permit key to the primary user, 
[0031 ] Upon receipt of the secondary use permit key, 
the primary user copies the copyrighted primary data 
and edits the copy of the copyrighted primary data. 
When the plaintext copyrighted secondary data which 
is the copyrighted primary data under editing is stored 
in the device of the primary user, the data is encrypted 
using a second crypt key included in the secondary use 
permit key. When the final edited data is stored in the 
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device of the primary user, the data is encrypted using 
a third crypt key. 

[0032] As a result of secondary processed data which 
is secondary data edition of the copyrighted data, the 
primary user now possesses the secondary exploitation $ 
right as secondarily generated copyright. In order to ex- 
ecute the secondary exploitation right, the third crypt key 
is registered at the key control center. The encrypted 
copyrighted secondary data obtained by encryption of 
the plaintext copyrighted secondary data using the third 
crypt key is sent to the secondary user by copying it to 
an external storage medium or by transferring it via the 
network system. 

[0033] The secondary user who wishes to utilize the 
encrypted copyrighted secondary data requests distri- 
bution of the third crypt key to the key control center. 
Upon receipt of the request for distribution of the third 
crypt key, the key control center sends the third crypt 
key to the secondary user via the network system. 
[0034] When the secondary user receives the third 
crypt key, the secondary user decrypts the encrypted 
copyrighted secondary data by third crypt key, and uti- 
lizes it. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0035] 

Fig. 1 is a block diagram of an embodiment of a data 
copyright management system according to the 
present invention; 

Fig. 2 is a schematical block diagram of an embod- 
iment of a system managing data copyrights ac- 
cording to the present invention; 
Fig. 3 is a conceptual drawing for explaining limita- 
tion of primary utilization executed by a copyright 
management program Pc in the present invention; 
Fig. 4 represents a conceptual drawing for explain- 
ing limitation of utilization of data editing executed 
by a copyright management program Pc in the 
present invention; and 

Fig, 5 is a block diagram for explaining a process 
for producing new copyrighted data from a plurality 
of a copyrighted data as objects. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENT 

[0036] In the following, description will be given on an 
embodiment of the present invention referring to the 
drawings. 

[0037] First, description will be given on the embodi- 
ment structure of a data copyright management system 
according to the present invention. 
[0038] A system shown in Fig. 1 comprises a data- 
base 1 , a key control center 2, users 3, 3, 3, and a 

network system 4, which connects these with each oth- 
er. To the database 1 , data is supplied from information 



providers (IP) 5, 5, 5 In some cases, the data is 

supplied to the user directly from the information provid- 
ers 6, 6, 6 via the network system 4 without going 

through the database 1 . 

[0039] The data utilized in the present embodiment 
are objects where program and data are combined to- 
gether. 

[0040] The users 3 are not mere utilizers, but can be 
information providers 5 or 6, who provide secondary ex- 
ploitation works, i.e. newly produced copyrighted works, 
by combining or modifying a plurality of copyrighted da- 
ta, which they received. 

[0041] In the data copyright management system ac- 
cording to the present invention as described above, 
each of the copyrighted data provided from the informa- 
tion providers 5 and 6 is encrypted to protect the copy- 
right. Therefore, when the user 3 received the encrypted 
copyrighted data, it must be decrypted to be utilized. For 
this purpose, all crypt keys are deposited to the key con- 
trol center 2 in this system and are under the control of 
the key control center 2. 

[0042] The cryptosystem adopted by each of the in- 
formation providers 5 and 6 may be freely chosen, while 
the cryptosystem to be used in the secondary exploita- 
tion as secondarily utilizing data and after as described 
later is limited to the system adopted by the key control 
center. 

[0043] The data from the database is generally uti- 
lized using personal computers, and the OS used in 
these personal computers must have security process- 
ing incorpo rated in it. For the control of crypt keys, the 
copyright management program is used. For the stor- 
age of the copyright management program and the crypt 
keys received from the key control center 2, "key cards" 
realized as software on memory or HDD or realized as 
hardware in form of a unique board, PC card, etc. are 
prepared as the storage area. 
[0044] The key control center stores the crypt keys for 
protection of copyright of data and for charging fees for 
utilization of the copyright regardless of whether the da- 
ta is actually utilized or simply registered and not uti- 
lized, and controls the crypt keys by coordinating the 
stored keys with copyright labels. 
[0045] Fig. 2 represents a schematical configuration 
of an embodiment of a data copyright processing sys- 
tem according to the present invention, in which a pri- 
mary user receiving data from an information provider 
edits the received data and supplies the edited data to 
a secondary user. 

[0046] In this system, a plaintext copyrighted primary 
data D1, an encrypted copyrighted primary data ED1i, 
a plaintext copyrighted secondary data D2, an encrypt- 
ed copyrighted secondary data ED2j, a plaintext primary 
copyright label Lc1 , a primary use permit key K1 includ- 
ing a first crypt key K1 i, a secondary utilization permit 
key K2, a third crypt key K3j, and a plaintext copyright 
management program Pc are used. 
[0047] This system comprises a database 11 , a key 
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control center 12, a primary user 13, a secondary user 
1 9, and a network system 1 4 for connecting these with 
each other. 

[0048] To the database 1 1 , data are supplied from in- 
formation providers 15, 15, 15, In some cases, the 5 

data may be supplied to the user 1 3 from the information 

providers 16, 16, 16, via the network system 14 or 

directly via an information recording medium 1 7 such as 
CD-ROM from the information providers 16 without go- 
ing through the database 11 . *° 
[0049] In this figure, solid lines represent paths of 
plaintext data, broken lines represent paths of encrypted 
data, and dotted lines represent paths of keys. 
[0050] In this system, the plaintext copyrighted prima- 
ry data D1 i is supplied to the primary user 1 3 under the is 
the copyrighted primary data ED1i encrypted using the 
first crypt key K1i: 

ED1i=E(K1i,D1i) 20 

from the information provider 15 via the network system 
14 through the database 11, or from the information pro- 
vider 1 6 via the network system 1 4, or via an information 
recording medium 1 7 such as CD-ROM. 25 
[0051 ] The primary user 1 3 who wishes to utilize the 
encrypted copyrighted primary data ED1 i thus supplied 
requests distribution of a primary use permit key K1 by 
presenting a primary copyright label Lc1 to the key con- 
trol center 1 2 via the network system 1 4. 30 
[0052] Upon receipt of the request for distribution of 
the primary use permit key K1 from the primary user 13, 
the key control center 1 2 searches the primary use per- 
mit key K1 using the presented primary copyright label 
Lc1 and sends the primary use permit key K1 to the pri- 35 
mary user 13 via the network system 14 and charges 
the fee at the same time. 

[0053] The primary user 13 decrypts the encrypted 
copyrighted primary data ED1 i using the first crypt key 
K1 i included in the received primary use permit key K1 40 

D1i = D (K1i, EDI i) 

and utilizes it. 45 
[0054] In case the decrypted plaintext copyrighted pri- 
mary data D1 i is stored in a device of the primary user 
13, it is re-encrypted using the first crypt key K1i 

50 

ED1i = E (K1i, D1i), 

and the re-encrypted copyrighted primary data ED1 i is 
stored, 

[0055] In case the re-encrypted copyrighted primary ss 
data ED1i is to be utilized again, the encrypted copy- 
righted primary data ED1i is re-decrypted and re-en- 
crypted. 



[0056] The primary user 13, who wishes to edits the 
plaintext copyrighted primary data D1i, requests distri- 
bution of the secondary use permit key K2 for edit of the 
plaintext copyrighted primary data D1 i to the key control 
center 12 via the network system 14. 
[0057] Upon receipt of the request for distribution of 
the secondary use permit key K2, the key control center 
1 2 sends the secondary use permit key K2 to the prima- 
ry user 13 via the network system 14, 
[0058] When the secondary use permit key K2 is re- 
ceived, the primary user 1 3 edits the plaintext copyright- 
ed primary data D1 i according to the content of the per- 
mit key and obtains the plaintext copyrighted secondary 
data D2j. 

[0059] In case the plaintext copyrighted secondary 
data D2j is to be stored in a device of the primary user 
13, the plaintext copyrighted secondary data D2j is en- 
crypted using the second crypt key K2: 

ED2j = E (K2, D2J). 

[0060] When the completion of the edit, the primary 
user 13 generates a third crypt key K3j in order to exe- 
cute the secondary exploitation right for data edit of the 
copyrighted secondary data, and the third crypt key K3j 
thus generated is registered at the key control center 
1 2. The third crypt key may not be generated by the pri- 
mary user 1 3, but it may be prepared and distributed by 
the key control center at the request of the primary user 
13. 

[0061 ] In case the primary user 1 3 copies the plaintext 
copyrighted secondary data D2j to an external storage 
medium 1 8 or transfers it via the network system 1 4, the 
plaintext copyrighted secondary data D2j is encrypted 
using the third crypt key 

ED2j = E(K3j,D2j) ( 

and the encrypted copyrighted secondary data ED2j is 
supplied to a secondary user 19. 
[0062] The secondary user 1 9, who wishes to utilize 
the encrypted copyrighted secondary data ED2j thus 
supplied, requests distribution of the third crypt key K3j 
to the key control center 12 via the network system 14. 
[0063] Upon receipt of the request for distribution of 
the third crypt key K3j from the secondary user 19, the 
key control center 12 sends the third crypt key K3j to the 
secondary user 1 9 via the network system 14. 
[0064] When the third crypt key K3j is received, the 
secondary user 1 9 decrypts the encrypted copyrighted 
secondary data ED2j using the third crypt key K3j 

D2j = D (K3j, ED2j) 

and utilizes it. 
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[0065] In case the encrypted copyrighted secondary 
data ED2j is to be utilized again, the encrypted copy- 
righted secondary data ED2j is decrypted and encrypted 
using the third crypt key K3j. 
[0066] Inthefollowing.detaileddescriptionwillbegiv- 
en on acquisition of the copyrighted primary data, pri- 
mary utilization of the copyrighted primary data, edit of 
the copyrighted primary data to the copyrighted second- 
ary data, supply of the edited copyrighted secondary da- 
ta, and utilization of the copyrighted secondary data. 
[0067] In this system, a plurality of plaintext copyright- 
ed primary data D1 i are supplied to the primary user 13 
with the encrypted copyrighted primary data ED1 i using 
the first crypt key K1i 

ED1i = E (K1i, D1i) 

together with the plaintext primary copyright label Lc1 
directly from the information provider 16 or via the da- 
tabase 1 1 . 

[0068] The copyright management program Pc man- 
ages the use of the copyrighted data by the user More 
concretely, the copyrighted data is decrypted and re- en- 
crypted using crypt key and utilization of the copyrighted 
data is restricted according to the content of the use per- 
mit key. 

[0069] In this system, a plaintext primary copyright la- 
bel Lc1 to be utilized for acquisition of crypt key is at- 
tached to the encrypted data ED1j. In other words, the 
encrypted copyrighted primary data ED1j comprises a 
plaintext copyright label Lc1 and the encrypted copy- 
righted primary data ED1 i. On the plaintext primary cop- 
yrighted label Lc1 , title of the data and name of the ap- 
plication program used and the name of the primary cop- 
yright owner, etc. are entered. 
[0070] The primary user 13 who wishes to utilize the 
encrypted copyrighted primary data ED1 i thus supplied 
requests distribution of the primary use permit key K1 
by presenting the plaintext primary copyright label Lc1 
to the key control center 12 via the network system 14. 
[0071] After confirming that the primary use permit 
key to be distributed is the key K1 using the presented 
primary copyright label Lc1, the key control center 12 
sends the primary use permit key K1 thus confirmed to 
the primary user 13 via the network system 14. 
[0072] When the primary use permit key K1 is re- 
ceived, the device of the primary user 13 is turned to 
copyright management mode, and the primary user 13 
is now entitled to utilize the copyrighted primary data. 
[0073] Because the first crypt key K1i is included in 
the primary use permit key K1 , the first crypt key K1 i is 
not recognized by the primary user 13. 
[0074] On the other hand, the key control center 12 
charges and collects the fee and identifies the status of 
use of the copyrighted data and the status of utilization 
of database of the primary user 13. 
[0075] Fig. 3 is a conceptual drawing for explaining 



restriction of the primary utilization by the copyright 
management program Pc in the present invention. 
[0076] Similarly to the invention described in Japa- 
nese prior application No. 6 - 64889, the primary utiliza- 

s tion of the data obtained in the data copyright manage- 
ment system of the present invention is limited to ordi- 
nary utilization, i.e. direct utilization of the data and out- 
put including printing of utilization results, and it is not 
allowed to copy the data to an external storage medium 

10 or to edit and transfer via a network system or in princi- 
ple, to store the data inside the device. However, it is 
possible to store the data with encrypted. 
[0077] It is needless to say that the data D other than 
the copyrighted data can be displayed, printed, stored, 

is copied, edited or transferred by the application program 
in use. 

[0078] In this figure, reference numeral 21 represents 
a storage unit such as a non-volatile semiconductor 
memory or a hard disk drive incorporated in a device 20 

20 of the primary user, reference numeral 22 represents a 
display unit for output, 23 represents a printing unit for 
output, D1 represents a copyrighted primary data, D 
represents a non-copyrighted general data, 24 repre- 
sents a secondary user, to whom the data is supplied 

25 by copying via flexble disk or CD-ROM or by transferring 
using a network system. 

[0079] In this figure, solid lines represent processing 
routes permitted, and broken lines show processing 
routes not permitted. 

30 [0080] The encrypted copyrighted primary data ED1 i 
acquired by the primary user 13 from external informa- 
tion providers 1 5 or 1 6 either directly or via the data base 
11 is incorporated with a plaintext primary copyright la- 
bel Lc1 supplied together-with and is stored in a storage 

35 unit 21 of the primary user device 20. 

[0081] The primary user 13 who wishes to utilize the 
encrypted copyrighted primary data ED1i stored in the 
storage unit 21 refers to general description of the en- 
crypted copyrighted primary data ED1i and a plaintext 

40 primary copyright label Lc1 shown information of appli- 
cation program used by the encrypted copyrighted pri- 
mary data ED1 i using the copyright management pro- 
gram Pc, and identifies the using environment of the en- 
crypted copyrighted primary data ED1i such as pres- 

45 ence or absence of an application program used for 
preparation of the encrypted copyrighted primary data 
ED1i. 

[0082] As a result, it is judged that the encrypted cop- 
yrighted primary data ED1 i can be utilized. When the 

so primary user 1 3 inputs request for the use of the encrypt- 
ed copyrighted primary data ED1 i to the copyright man- 
agement program Pc, the copyright management pro- 
gram Pc starts the application program used by the en- 
crypted copyrighted primary data ED1 i and reads the 

55 encrypted copyrighted primary data ED 1 i from the stor- 
age unit 21 to memory in the primary user device 20. 
[0083] On the other hand, the plaintext copyright label 
Lc1 is sent to the key control center 1 2, and the primary 
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use permit key K1 is supplied to the primary user in ac- 
cordance with the processing flow already described. 
The encrypted copyrighted primary data ED1i is de- 
crypted to the plaintext copyrighted primary data D1 i, 
using the first crypt key K1 i included in the primary use s 
permit key K1 

D1i = D (K1i, ED1i), 

and it can be used by the started application program. 
[0084] In case the plaintext copyrighted primary data 
D1i on memory of the primary user device 20 is to be 
stored in the storage unit 21 , the plaintext copyrighted 
primary data D1 i is re-encrypted using the first crypt key 
K1i 

ED1i = E (K1i, D1i), 

and it is stored. 

[0085] The storage includes producing and storing 
temporary file for data maintenance. 
[0086] In case the re-encrypted data ED1 i is to be re- 
used, re-decryption and re-encryption are performed 
using the first crypt key K1i. 

[0087] The utilization other than displaying and print- 
ing, storage or editing, i.e. copying to an external stor- 
age medium or transfer to other device, of the plaintext 
copyrighted primary data D1 or the encrypted copyright- 
ed primary data ED1i are prohibited by the copyright 
management program Pc. 

[0088] As already described, in the data copyright 
management system of the present invention, the utili- 
zation of the obtained copyrighted data is limited to or- 
dinary modes of utilization, i.e. direct utilization by dis- 
playing the data on the display unit 22 or output of the 
utilization results by the printer 23. Copying of the data 
to an external storage medium or transfer of the data to 
the secondary user 24 via the network system and ed- 
iting the data are prohibited by the copyright manage- 
ment program. 

[0089] Therefore, it is not allowed to cut and paste a 
part of the copyrighted primary data D1 i to the other data 
D or to cut and paste a part of the other data D to the 
copyrighted primary data D1 i. The copyrighted primary 
data D1 i can be stored to the storage unit 21 exception- 
ally if it is in the encrypted state using the first crypt key 
K1 i, but it cannot be stored in case it has been edited. 
[0090] In the data copyright management system of 
the present invention, distinguishing the copyrighted pri- 
mary data D1 from general data D and determing as to 
whether the copyrighted data has been edited or not are 
performed by the copyright management program Pc. 
[0091] Computer file comprises a data file main unit 
and a management table entered attributes of the data 
file. Therefore, by investigating the management table, 
it can be judged whether the file is the copyrighted data 



or not. On this management table, data file size and date 
and time of produced are entered. By investigating 
these in the management table, it can be judged wheth- 
er the file has been edited or not. 
[0092] When stored in the storage unit 21 , the copy- 
righted primary data D1 i is to be encrypted and coupled 
with the primary copyright label Lc1 . When the data is 
decrypted and is read on memory, the copyrighted pri- 
mary data D1i and the primary copyright label Lc1 are 
separated from each other by the copyright manage- 
ment program, and the separated copyright label Lc1 is 
managed by the copyright management program Pc. 
[0093] The copyright management program watches 
by which application program the copyrighted primary 
data D1 i is used and prohibits "cut and paste" of the cop- 
yrighted primary data D1 i to the non-copyrighted gener- 
al data D and "cut and paste" of the non-copyrighted 
general data D to the copyrighted primary data D1 i. 
[0094] Fig. 4 is a conceptual drawing for explaining 
restriction of utilization in the data editing executed by 
the copyright management program Pc in the present 
invention. 

[0095] The primary user 13 who wishes to edit the 
plaintext copyrighted primary data D1i, in the primary 
utilization, notifies the key control center via the network 
14 that the plaintext copyrighted primary data D1 i is to 
be edited and requests distribution of the secondary use 
permit key K2 necessary for the edit of the plaintext cop- 
yrighted primary data D1 i to the key control center 12 
via the network system 1 4. 

[0096] Upon receipt of the request for distribution of 
the secondary use permit key K2 from the primary user 
13, the key control center 12 sends the secondary use 
permit key K2j to the primary user 13 via the network 
system 14. 

[0097] As a result, the primary user device 20 of the 
primary user 13 is turned to edition mode, and the pri- 
mary user 1 3 can edit the encrypted copyrighted primary 
data ED1i. 

[0098] The primary user 13 decrypts the encrypted 
copyrighted primary data ED1 i to the plaintext copyright- 
ed primary data D1 i using the first crypt key K1 i and dis- 
plays it on the display unit 22 and edits the data. To pro- 
tect the copyright of the copyrighted primary data at first, 
the plaintext copyrighted primary data D1 i for editing is 
copied, and the plaintext copyrighted primary data D1i' 
for edit obtained by this copying is edited. 
[0099] The primary user 13 decrypts the encrypted 
copyrighted primary data ED1 i to the plaintext copyright- 
ed primary data D1i to display on the display unit 22, 
and before editing, copies the plaintext copyrighted pri- 
mary data D1i for edit and edits the plaintext copyrighted 
primary data for edit D1 i' obtained by copying. 
[0100] In case the plaintext copyrighted primary data 
for edit D1i' or the plaintext copyrighted primary data 
D1 i" under editing is to be stored in the primary user de- 
vice of the user 13, encryption is performed using the 
secondary use permit key K2 
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ED1i l = E(K2, D1i') 

or 

5 

ED1 i M = E {K2, D1i"), 

and it is stored as the encrypted copyrighted primary da- 
ta ED1i' or as the encrypted copyrighted primary data 
ED1 i", 

[0101] As the encrypted copyrighted primary data 
ED1 i is stored in the storage unit 21 without being edit- 
ed, by comparing its management table with file size, 
produced date and time of the plaintext copyrighted pri- 
mary data for edit D1 i* or D1 i" which has been edited, it 
is judged whether the file is the edited file or not. 
[01 02] When edit of the data has been completed, the 
data is produced to a plurality of new plaintext copyright- 
ed secondary data D2j, and secondary exploitation right 
as secondary copyrights is newly generated on the data 
D2j. To protect the secondary exploitation right, the pri- 
mary user 1 3 who edited the plaintext primary copyright- 
ed data D1i requests distribution of the third crypt key 
K3j to the key control center 12. Upon receipt of the re- 
quest for distribution of the third crypt key K3j, the key 
control center 12 sends the third crypt key K3j to the 
primary user 13 via the network system 14. 
[0103] When the third crypt key K3j is received, the 
primary user 13 encrypts the plaintext copyrighted sec- 
ondary data D2j using the third crypt key K3j 

ED2j = E (K3j, D2j), 

and the encrypted copyrighted secondary data ED2j is 
stored in the storage unit 21 of the primary user 13. 
[0104] In case the encrypted copyrighted data ED2j 
is to be utilized, decryption and encryption are per- 
formed using the third crypt key K3j. 
[0105] In the plaintext copyrighted secondary data 
D2j edited by the primary user 1 3, secondary exploita- 
tion right in data edition of the primary user 1 3 is present 
in addition to the primary copyright of the plaintext cop- 
yrighted primary data D1 i before editing and owned by 
the information provider. To execute the secondary ex- 
ploitation right, the primary user 13 sends information 
such as title of the data, name of the application program 
used, outline of the content, name of the primary copy- 
right owner, etc. together with the third crypt key K3j to 
the key control center 12. The key control center stores 
and controls these together with the third crypt key K3j. 
[0106] On the other hand, the primary user 13 sup- 
plies the encrypted copyrighted secondary data ED2j to 
the secondary user 24 by copying it to an external stor- 
age medium 1 8 or by transferring it via the network sys- 
tem 1 4. 

[0107] The secondary user 24 who wishes to utilize 



the supplied encrypted copyrighted secondary data 
ED2j requests distribution of a use permit key including 
the third crypt key K3j to the key control center 12. 
[0108] The utilization of the plaintext copyrighted sec- 
ondary data D2j using the use permit key including the 
third crypt key K3j is limited to general utilization of the 
plaintext copyrighted secondary data D2j or to storage 
to the user device, and it is not allowed to copy the plain- 
text copyrighted secondary data D2j or the encrypted 
copyrighted secondary data ED2j to an external storage 
medium 1 8, to transfer it to a third user via the network 
14, or to edit the plaintext copyrighted secondary data 
D2j. 

[01 09] As described above, the copyrighted data han- 
dled in the present invention is directed to " object' where 
program and data are integrated, and the object can be 
processed as parts-like through computer programming 
or various types of processings. 
[0110] Description will be given now on the case 
where new copyrighted data is prouced utilizing a plu- 
rality of copyrighted data that are the objects, referring 
to Fig. 5 and Fig. 2. 

[0111] In Fig, 5, reference numerals 31, 32 and 33 
represent copyrighted primary data D11 , D12 and D13 
which comprise objects respectively. By utilizing the 
copyrighted primary data D11, D12 and D13, the new 
copyrighted secondary data D2j represented by 30 is 
produced. 

[0112] The utilization of the copyrighted data D11, 
D12 and D13 include three editorial forms: utilization of 
whole parts such as the copyrighted data D11 shown by 
reference numeral 34; utilization of a part such as the 
copyrighted data D12' as shown by reference numeral 
35; and utilization after modifying such as the copyright- 
ed data D1 3' as shown by reference numeral 36. 
[0113] The copyrighted data are edited by linking in 
object-unit, referring, embedding and combining them. 
Such embedding and combining can be performed free- 
ly. 

[01 14] Also, it is possible to add other matters to the 
copyrighted data 37, which has been thus embedded 
and combined. 

[0115] The newly produced copyrighted data D2j in 
this way consists of objects assembly. 
[0116] In the plaintext copyrighted secondary data 
D2j thus produced, secondary exploitation right of the 
primary user 13 who has produced newly arises in ad- 
dition to the copyright of the copyrighted primary data 
D1i. 

[01 17] To execute the secondary exploitation right, it 
is necessary to encrypt the plaintext copyrighted sec- 
ondary data. For this purpose, the primary user 13 pre- 
pares the third crypt key K3j and encrypts the plaintext 
copyrighted data D2j using the third crypt key K3j 

ED2j = E (K3j, D2j), 
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and the encrypted copyrighted data ED2j is supplied to 
the secondary user 19 by copying it to an external stor- 
age medium 18 or by transferring it via the network 14. 
[0118] In order that the tertiary user can easily receive 
the third crypt key K3j p the third crypt key K3j is regis- 
tered at the key control center 1 2. By registering the third 
crypt key K3j, the secondary exploitation right of the pri- 
mary user 13 is recorded at the key control center 12. 
[0119] In this case, those sent from the primary user 
13 to the key control center 12 at this time includes, in 
addition to a plurality of the third crypt keys K3j of which 
number corresponds to the produced plural copyrighted 
secondary data, the number of the third crypt keys K3j, 
the second crypt key K2j, the copyrighted primary data 
used, information of the other copyrighted data to which 
the copyright management program is linking, access 
path to the copyrighted data used, application program 
used by the copyrighted data used, and explanation of 
the copyright works. 

[0120] The secondary user 19 who wishes to utilize 
the encrypted copyrighted secondary data ED2j thus 
supplied requests distribution of the third crypt key K3j 
to the key control center 12. 
[0121] Upon receipt of the request for distribution of 
the third crypt key K3j, the key control center 12 sends 
the third crypt key K3j to the secondary user 19 via the 
network system 1 4, 

[01 22] The secondary user 1 9 receives the third crypt 
key K3j, decrypts the encrypted copyrighted secondary 
data ED2j using the third crypt key K3j, and utilizes it. 
[0123] When the third crypt key K3j is received, the 
copyright management program Pc attaches the copy- 
right label Lc2j to each copyrighted data D2j so that the 
secondary user can utilize it. 
[0124] At this time, the linkage with the copyrighted 
data, which is the object linked with the newly produced 
copyrighted data, is released. At the time of the release 
of the linkage, the entity of the copyrighted primary data, 
which has had so far relationship as the linkage only, is 
embedded into the encrypted copyrighted secondary 
data ED2j, and allows to distribute as a copyright work 
only through ED2j file. 

[0125] In this case, if the encrypted copyrighted sec- 
ondary data ED2j is to be utilized again, decryption and 
encryption are performed using the third crypt key K3j. 
[0126] The key control center sends back the third 
crypt key K3j to the requester and charges and collects 
the fee according to the copyright labels Lc1 and Lc2. 
[0127] The copyright owner of the copyrighted data 
can change access path of own copyrighted data by ap- 
plying to the key control center. 
[0128] The copyright owner of the copyrighted data 
can also edit (modify) own copyrighted data using the 
third crypt key K3j and also can register it using another 
key. 



Claims 

1. A data copyright management method with the 
steps: 

5 

sending copyrighted primary data ED1i en- 
crypted by a first crypt key K1 i from a database 

11 to a primary user 13; 

10 transmitting a first use permit key K1 including 

said first crypt key K1 i from a key control center 

12 to said primary user 13; 

decrypting said encrypted copyrighted primary 
is data ED1 i by using said first crypt key K1 i and 

performing primary utilization of the copyright- 
ed primary data D1i by said primary user 13; 

transmitting a second use permit key K2 from 
20 said key control centerto said primary user 1 3 ; 

copying said copyrighted primary data D1 i; and 

performing edit on said copy of said copyright- 
25 ed primary data D1 i using said received second 

use permit key K2 by said primary user 13; 

encrypting said data being under editing to be 
stored by said second use permit key K2; 

30 

obtaining copyrighted secondary data D2j 
when editing is completed; and 

encrypting said copyrighted secondary data 
35 D2j by a third crypt key K3j and storing, copying 

or transferring the encrypted copyrighted sec- 
ondary data ED2j. 

2. A data copyright management method according to 
40 claim 1, wherein said second use pemit key in- 
cludes a second crypt key therein; comprising the 
step: 

encrypting said copyrighted primary data under 
45 editing by using said second use permit key, to 

be stored. 

3. A data copyright management method according to 
claim 1 or 2, comprising the steps: 

50 

obtaining copyrighted secondary data by edit- 
ing said copyrighted primary data and 
encrypting said copyrighted secondary data by 
using a third use permit key, to be stored, 

55 

4. A data copyright management method according to 
claim 3, comprising the step 

transferring said encrypted copyrighted secondary 
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data to a secondary user. 

5. A data copyright management method according to 
claim 3 or 4, comprising the steps: 

preparing said third crypt key by said primary 
user and 

transmitting said third crypt key from said pri- 
mary user to said key control center. 

6. A data copyright management method according to 
claim 3 or 4, comprising the steps: 

preparing said third crypt key by said key con- 
trol center and 

transmitting said third crypt key from said key 
control center to said primary user. 

7. A data copyright management method according to 
claims 1,2,3,4,5 or 6, comprising the step: 

adding a non-encrypted primary copyright label 
to said encrypted copyrighted primary data. 

8. A data copyright management method according to 
claim 1 , comprising the steps: 

presenting said primary copyright label by said 
primary user to said key control center, before 
transmitting said first use permit key from said 
key control center to said primary user. 

9. A data copyright management method according to 
claim 1 , comprising the steps: 

presenting said primary copyright label by said 
primary user to said key control center, before 

transmitting said second use permit key from 
the key control center to said primary user. 

1 0. A data copyright management method according to 
claim 6, comprising the steps: 

presenting said primary copyright label by said 
primary user to said key control center, before 

transmitting said third krypt key from the key 
control center to said primary user. 

11. A data copyright management method according to 
claim 3, comprising the step 

adding a non-encrypted secondary copyright label 
to said encrypted copyrighted secondary data. 

1 2. A data copyright management method according to 



claim 10, comprising the step, 
presenting said secondary copyright label to said 
key control center by said primary user; and 
transmitting a third crypt key from said key control 
s center to said primary user. 

1 3. A data copyright management method according to 
one of the preceding claims characterized In that 
it is run as a data management program (Pc) on a 

10 computer. 

1 4. A Data carrier for use in the method of one of claims 
1 to 12 characterized by carrying a data manage- 
ment program (Pc) executing a method according 

is to one of claims 1 to 12 when run on a computer. 

15. A Data carrier according to the preceding claim, 
characterized In that it carries the management 
program (Pc) and crypt keys. 

20 

PatentansprUche 

1. Verfahren zur Datenurheberrechtsverwaltung mit 
25 den Schritten: 

Senden von urheberrechtsgeschiitzten prima - 
ren Daten ED1 i, diedurch einen ersten Schlus- 
sel K1 i verschlusseltsind, von einer Datenbank 

30 11 zu einem primaren Benutzer 13; 

Ubertragen eines Erstgebrauchs-Erlaubnis- 
schliissels K1 enthaltend den ersten Schlussel 
K1i von einem Schliisselsteuerzentrum 12 zu 
dem primaren Benutzer 13; 

35 Entschlusseln der verschlusselten urheber- 

rechtsgeschiitzten primaren Daten ED1i durch 
Verwendung des ersten SchlCissels K1i und 
Durchfuhren einer primaren Benutzung der ur- 
heberrechtsgeschiitzten primaren Daten D1i 

40 durch den primaren Benutzer 13; 

Ubertragen eines Zweitgebrauchs-Eriaubnis- 
schlussels K2 von dem Schliisselsteuerzen- 
trum zu dem primaren Benutzer 13; 
Kopieren der urheberrechtsgeschiitzten prima- 

45 ren Daten D1i; und 

Durchfuhren einer Aufbereitung bei der Kopie 
der urheberrechtsgeschiitzten primaren Daten 
D1i unter Verwendung des . empfangenen 
Zweitgebrauchs-Erlaubnisschliissels K2 durch 

50 den primaren Benutzer 1 3; 

Verschliisseln dieser Daten wahrend der Auf- 
bereitung, um gespeichert zu werden, durch 
den Zweitgebrauchs-Erlaubnisschliissel K2; 
Erhaltenurheberrechtsgeschiitztersekundarer 

55 Daten D2j t wenn die Aufbereitung beendet ist; 

und Verschliisseln der urheberrechtsgeschiitz- 
ten sekundaren Daten D2j durch einen dritten 
Schlussel K3j und Speichern, Kopieren oder 
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Ubertragen derverschlusselten urheberrechts- 
geschutzten sekundaren Daten ED2j. 

2. Verfahren zur Daten urheberrechtsverwaltung nach 
Anspruch 1 , bei dem der Zweitgebrauchs-Eriaub- 
nisschlussel einen zweiten Schlussel enthalt; auf- 
weisend den Schritt: 

Versch [Ossein der urheberrechtsgeschutzten 
primaren Daten bei der Aufbereitungdurch Ver- 
wendung des Zweitgebrauchs-Erlaubnis- 
schlussels, um gespeichert zu werden. 

3. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 1 oder 2,. aufweisend die Schritte: 

Erhaltenurheberrechtsgeschutztersekundarer 
Daten durch Aufbereiten der urheberrechtsge- 
schutzten primaren Daten, und Verschlusseln 
der urheberrechtsgeschutzten sekundaren Da- 
ten durch Verwendung eines Drittgebrauchs- 
Erlaubnisschlussels, um gespeichert zu wer- 
den. 

4. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 3, aufweisend den Schritt: 

Ubertragen derverschlusselten urheberrechts- 
geschutzten sekundaren Daten zu einem se- 
kundaren Benutzer. 

5. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 3 Oder 4, aufweisend die Schritte: 

Erzeugen des dritten Schlussels durch den pri- 
maren Benutzer, und 

Ubertragen des dritten Schlussels von dem pri- 
maren Benutzer zu dem Schlusselsteuerzen- 
trum. 

6. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 3 oder4, aufweisend die Schritte; 

Erzeugen des dritten Schlussels durch das 
Schlusselsteuerzentrum, und 
Ubertragen des dritten Schlussels von dem 
Schlusselsteuerzentrum zu dem primaren Be- 
nutzer. 

7. Verfahren zur Datenurheberrechtsverwaltung nach 
den Anspruchen 1 , 2, 3, 4, 5 oder 6, aufweisend den 
Schritt: 

Hinzufugen einer unverschliisselten primaren 
Urheberrechtsmarkierung zu den verschlussel- 
ten urheberrechtsgeschutzten primaren Daten. 

8. Verfahren zur Datenurheberrechtsverwaltung nach 



Anspruch 1 , aufweisend die Schritte: 

Prasentieren der primaren Urheberrechtsmar- 
kierung durch den primaren Benutzer bei dem 
5 Schlusselsteuerzentrum, bevor der Erstge- 

brauchs-Erlaubnisschlussel von dem Schlus- 
selsteuerzentrum zu dem primaren Benutzer 
ubertragen wird. 

10 9. Verfahren zur Daten urheberrechtsverwaltung nach 
Anspruch 1, aufweisend die Schritte: 



Prasentieren der primaren Urheberrechtsmar- 
kierung durch den primaren Benutzer bei dem 
Schlusselsteuerzentrum, bevor 
der Zweitgebrauchs-Erlaubnisschlussel von 
dem Schlusselsteuerzentrum zu dem primaren 
Benutzer ubertragen wird. 

10. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 6, aufweisend die Schritte: 

Prasentieren der primaren Urheberrechtsmar- 
kierung durch den primaren Benutzer bei dem 
Schlusselsteuerzentrum, bevor 
der dritte Schlussel von dem Schlusselsteuer- 
zentrum zu dem primaren Benutzer ubertragen 
wird. 

11. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 3, aufweisend den Schritt: 

Hinzufugen einer unverschlussetten sekunda- 
ren Urheberrechtsmarkierung zu den ver- 
schliisselten urheberrechtsgeschutzten sekun- 
daren Daten. 

12. Verfahren zur Datenurheberrechtsverwaltung nach 
Anspruch 10, aufweisend die Schritte: 

Prasentieren der sekundaren Urheberrechts- 
markierung durch den primaren Benutzer bei 
dem Schlusselsteuerzentrum; und 
Ubertragen eines dritten Schlussels von dem 
Schlusselsteuerzentrum zu dem primaren Be- 
nutzer. 
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13. Verfahren zur Datenurheberrechtsverwaltung nach 
einem der vorhergehenden Anspruche, dadurch 

so gekennzelchnet, dass es als ein Datenverwal- 
tungsprogramm (Pc) auf einem Computer ablauft. 

14. Datentrager zur Verwendung bei dem Verfahren 
nach einem der Anspruche 1 bis 1 2, gekennzeich- 

55 net durch Tragen eines Datenverwaltungspro- 
gramms (Pc), das ein Verfahren gemaB einem der 
Anspruche 1 bis 12 ausfuhrt, wenn es auf einem 
Computer ablauft. 
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15. Datentrager nach dem voitiergehenden Anspruch, 
dadurch gekennzeichnet, dass er das Verwal- 
tungsprogramm (Pc) und Schlussel tragt.. 



Revendlcations 

1 . Procede de gestion des droits d'auteur de donnees 
comprenant les Stapes consistant a : 

envoyer des donnees prima ires soumises a 
droits d'auteur ED1 i cryptees avec une premie- 
re cle de cryptage K1 i depuis une base de don- 
nees 11 vers un utilisateur primaire 13 ; 
transmettre une premiere cle d'autorisation 
d'utilisation K1 comprenant ladite premiere c!6 
de cryptage K1 i depuis un centre de comman- 
de des cles 1 2 vers I edit utilisateur primaire 1 3 ; 
decrypter lesdites donnees primaires soumises 
a droits d'auteur cryptees ED1 i en utilisant la- 
dite premiere cle de cryptage K1i et realiser 
('utilisation primaire des donnees primaires 
soumises a droits d'auteur D1i par ledit utilisa- 
teur primaire 13 ; 

transmettre une deuxieme cl6 d'autorisation 
d'utilisation K2 depuis ledit centre de comman- 
de des cles vers ledit utilisateur primaire 13 ; 
copier lesdites donnees primaires soumises a 
droits d'auteur D1 i ; et 

realiser ('edition desdites donnees primaires 
soumises a droits d'auteur D1 i en utilisant ladite 
deuxieme cle* d'autorisation d'utilisation K2 re- 
cue par ledit utilisateur primaire 13 ; 
crypter lesdites donnees en cours d'edition a 
stocker avec ladite deuxieme cle d'autorisation 
d'utilisation K2 ; 

obtenir les donnees second aires soumises a 
droits d'auteur D2j lorsque ('edition est 
complete ; et 

crypter lesdites donnees secondaires soumi- 
ses a droits d'auteur D2j avec une troisieme cle 
de cryptage K3j et stocker, copier ou transferer 
des donnees secondaires soumises a droits 
d'auteur cryptees ED2j. 

2. Procede de gestion des droits d'auteur de donnees 
selon la revendication 1, dans laquelle ladite 
deuxieme cle d'autorisation d'utilisation inclut une 
deuxieme cle" de cryptage, comprenant I'Stape con- 
sistant a crypter lesdites donnees primaires soumi- 
ses a droits d'auteur en cours d'edition en utilisant 
ladite deuxieme cle d'autorisation d'utilisation, a 
stocker. 

3. Procede de gestion des droits d'auteur de donnees 
selon la revendication 1 ou 2, comprenant les Sta- 
pes consistant a obtenir les donnees secondaires 
soumises a droits d'auteur en editant lesdites don- 



nees primaires soumises a droits d'auteur et a cryp- 
ter lesdites donnSes secondaires soumises a droits 
d'auteur en utilisant une troisiSme cle d'autorisation 
d'utilisation, a stocker. 

5 

4. Procede de gestion des droits d'auteur de donnees 
selon la revendication 3, comprenant I'etape con- 
sistant a transferer lesdites donnees secondaires 
soumises a droits d'auteur cryptees a un utilisateur 

10 secondaire. 

5. Procede de gestion des droits d'auteur de donnees 
selon la revendication 3 ou 4, comprenant les Sta- 
pes consistant a preparer ladite troisieme cle de 

is cryptage par ledit utilisateur primaire et a transmet- 
tre ladite troisieme cle de cryptage dudit utilisateur 
primaire audit centre de commande des cles. 

6. Procede de gestion des droits d'auteur de donnees 
20 selon la revendication 3 ou 4,' comprenant les eta- 

pes consistant a preparer ladite troisieme cle de 
cryptage par ledit centre de contrdle des cISs et a 
transmettre ladite troisieme cle de cryptage dudit 
centre de commande des cles audit utilisateur pri- 
25 maire. 

7. ProcSde de gestion des droits d'auteur de donnees 
selon les revendications 1 , 2, 3, 4, 5 ou 6, compre- 
nant I'etape consistant a ajouter une etiquette de 

30 droits d'auteur primaire non cryptee audites don- 
nees primaires soumises a droits d'auteur cryptees. 

8. Procede de gestion des droits d'auteur de donnees 
selon la revendication 1, comprenant les etapes 

35 consistant a presenter ladite etiquette de droits 
d'auteur primaire par ledit utilisateur primaire audit 
centre de commande des cles avant de transmettre 
ladite premiere cle d'autorisation d'utilisation dudit 
centre de controle des cISs audit utilisateur primai- 

40 re. 

9. Procede de gestion des droits d'auteur de donnees 
selon la revendication 1, comprenant les Stapes 
consistant a presenter ladite etiquette de droits 

45 d'auteur primaire par ledit utilisateur primaire audit 
centre de commande des cles avant de transmettre 
ladite deuxieme cle d'autorisation d'utilisation du 
centre de commande des cles audit utilisateur pri- 
maire. 

50 

1 0. Procede de gestion des droits d'auteur de donnSes 
selon la revendication 6, comprenant les etapes 
consistant a presenter ladite etiquette de droits 
d'auteur primaire par ledit utilisateur primaire audit 

55 centre de commande des cles avant de transmettre 
ladite troisieme cl6 de cryptage du centre de com- 
mande des cles audit utilisateur primaire. 
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1 1 . Procede de gestion des droits d'auteur de donnees 
selon la revendication 3, comprenant I'etape con- 
sistant a ajouter une etiquette de droits d'auteur se- 
condare non cryptee auxdttes donnees secondai- 
res soumises a droits d'auteur cryptees. 5 

1 2. Procede de gestion des droits d'auteur de donnees 
selon la revendication 10, comprenant I'etape con- 
sistent a presenter ladite etiquette de droits d'auteur 
secondaire audit centre de commande des cles par 10 
ledtt utilisateur primaire et a transmettre une troisie- 

me cle de cryptage dudit centre de commande des 
cles audit utilisateur primaire. 

13. Procede de gestion des droits d'auteur de donnees 15 
selon Tune des revendications precedentes, carac- 
terise en ce qu'il est execute sous la forme d'un 
programme de gestion de donnees (Pc) sur un or- 
dinateur. 

20 

14. Support de donnees destine a etre utilise dans le 
proced6 selon I'une des revendications 1 a 12, ca- 
racterise par le fait de porter un programme de 
gestion de donnees (Pc) executant un procedd se- 
lon I'une des revendications 1 a 1 2 lorsqu'il est ex6- 25 
cut6 sur un ordinateur. 

15. Support de donnees selon la revendication prece- 
dence, caracterise en ce qu'il porte le programme 

de gestion (Pc) et les cles de cryptage. 30 
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FIG. 2 
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FIG. 3 
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FIG. 5 
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